Description (CNA)
In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. The code parameter is easily predicted from the time of day.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.wowonder.com
- https://securityforeveryone.com/blog/wowonder-0-day-vulnerability-cve-2021-27200
- https://www.exploit-db.com/exploits/49989
ADP enrichment
No English description supplied.